CVE-2026-59714
Received Received - Intake

Message Content Overwrite in Open WebUI

Publication date: 2026-08-13

Last updated on: 2026-08-13

Assigner: GitHub, Inc.

Description
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.9.5 before 0.10.0, any authenticated user can overwrite the content of a message in a channel they do not belong to (including private and DM channels) by sending a chat completion request with a channel:-prefixed chat_id and a target message_id. The channel: path routes pipeline output through _make_channel_emitter, which writes to the Messages table using the caller-supplied message_id without binding it to the channel. This issue is fixed in version 0.10.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-13
Last Modified
2026-08-13
Generated
2026-08-14
AI Q&A
2026-08-13
EPSS Evaluated
N/A
NVD
CVE-2026-59714
EUVD
EUVD-2026-58246

Affected Vendors & Products

Showing 4 associated CPEs
Vendor Product Version / Range
open_webui open_webui to 0.10.0 (exc)
open_webui open_webui 0.10.0
open_webui open_webui From 0.9.5 (inc) to 0.10.0 (exc)
open_webui open_webui to 0.9.6 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-59714 is a vulnerability in Open WebUI versions 0.9.5 to 0.9.9 where authenticated users can overwrite messages in channels they do not belong to, including private and direct messages. The issue occurs via the chat completion API when using a channel:-prefixed chat_id and a target message_id. The flaw allows bypassing ownership checks and directly updating messages without validation.

Detection Guidance

To detect this vulnerability, check Open WebUI versions between 0.9.5 and 0.9.9. Review logs for unauthorized message modifications in channels where the user does not belong. Look for chat completion requests with channel:-prefixed chat_id and target message_id parameters.

Impact Analysis

This vulnerability can lead to message integrity destruction and impersonation. Attackers can alter the content of messages in private or DM channels they do not own while keeping the original author attribution. This could be used to spread misinformation, manipulate conversations, or impersonate other users.

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by allowing unauthorized users to alter message content in private or direct message channels. For GDPR, this may affect data integrity and user trust, while for HIPAA, it could compromise protected health information integrity if messages contain such data.

Mitigation Strategies

Upgrade Open WebUI to version 0.10.0 or later immediately. Ensure all users are authenticated and restrict access to sensitive channels. Monitor message logs for unauthorized changes and review API requests for channel:-prefixed chat_id usage.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-59714. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart